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IN THE CLAIMS: 

1. (CURRENTLY AMENDED) A method for graphically presenting characteristics of data 
traffic on a distributed computer network, comprising: 

monitoring traffic on said network; 

selecting a characteristic of said traffic for display; 

obtaining a plurality of values of said characteristic for selected time intervals within 
a larger time interval; and 

presenting said characteristic by playing a rapid succession of graphical images, each 
graphical image representing said network as nodes connected by lines, said nodes each rep- 
resenting components in said network, said lines representing traffic flow between nodes said 
components , each graphical image graphically representing the value of said characteristic at 
a particular selected time interval within the larger time interval with a property of at least 
one line of said lines, said property indicating a value of said characteristic. 

2-3. (CANCELLED) 

4. (ORIGINAL) The method as in claim 1, further comprising: 

using a width of said at least one line as said property. 

5. (ORIGINAL) The method as in claim 1, further comprising: 

using a color of said at least one line as said property. 

6. (ORIGINAL) The method as in claim 1, further comprising: 
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2 using an arrow drawn on said at least one line as said property. 

1 7. (ORIGINAL) The method as in claim I, further comprising: 

2 using a length of said at least one line as said property. 

1 8. (ORIGINAL) The method as in claim 1, further comprising: 

2 using a density of said at least one line as said property. 

1 9. (ORIGINAL) The method as in claim 1, further comprising: 

2 using a visual characteristic of said at least one line as said property. 

1 10. (ORIGINAL) The method as in claim 1, further comprising: 

2 displaying a filtering expression in a graphical user interface; 

3 selecting, from said graphical user interface, records from network information files 

4 to display said characteristic of said traffic. 

1 11. (ORIGINAL) The method as in claim 10, further comprising: 

2 calculating parameters that are associated with the records selected from network files 

3 and storing the parameters in a local file. 

l 12. (CANCELLED) 

l 13. (ORIGINAL) The method as in claim 1, further comprising: 
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2 using a filtering program to select records in network information files that meet se- 

3 lected filtering criteria. 

1 14. (PREVIOUSLY PRESENTED) The method as in claim 13, further comprising: 

2 compiling the selected records from network information files during the selected 

3 time intervals, each compiled record meeting at least one selected filtering criterion. 

1 15. (ORIGINAL) The method as in claim 14, further comprising: 

2 calculating data that represent the compiled records, and storing the data in a file. 

1 16. (PREVIOUSLY PRESENTED) The method as in claim 1 , further comprising: 

2 displaying a map of the network topology and overlaying the map with said succes- 

3 sion of graphical images. 

1 17. (PREVIOUSLY PRESENTED) The method of claim 14, further comprising: 

2 including a time interval criterion which indicates how often to compile and package 

3 information from the network information files. 

1 18. (PREVIOUSLY PRESENTED) The method of claim 1, further comprising: 

2 defining the larger time interval with a starting time and an ending time specified 

3 within a filtering criteria. 

1 19. (CURRENTLY AMENDED) A data visualization apparatus for graphically presenting 

2 characteristics of data traffic on a distributed computer network, comprising: 
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means for monitoring traffic on said network; 
means for selecting characteristics of said traffic for display; 

means for obtaining a plurality of values of said characteristics for selected time in- 
tervals within a larger time interval; and 

means for presenting said characteristics by playing a rapid succession of graphical 
images, each graphical image representing said network as nodes connected by lines, said 
nodes each representing components in said network, said lines representing traffic flow be- 
tween-^tedes said components , each graphical image graphically representing the value of 

11 said characteristics at a particular time interval within the larger time interval with a property 

12 of at least one line of said lines, said property indicating a value of said characteristics. 

l 20-21. (CANCELLED) 

1 22. (ORIGINAL) The apparatus as in claim 19, further comprising: 

2 means for using a width of said at least one line as said property. 

1 23. (ORIGINAL) The apparatus as in claim 19, further comprising: 

2 means for a using a color of said at least one line as said property. 

1 24. (ORIGINAL) The apparatus as in claim 19, further comprising: 

2 means for using an arrow drawn on said at least one line as said property. 

1 25. (ORIGINAL) The apparatus as in claim 19, further comprising: 

2 means for using a length of said at least one line as said property. 
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1 26. (ORIGINAL) The apparatus as in claim 19, further comprising: 

2 means for using a density of said at least one line as said property. 

1 27. (ORIGINAL) The apparatus as in claim 19, further comprising: 

2 means for using a visual characteristic of said at least one line as said property. 

1 28. (PREVIOUSLY PRESENTED) The apparatus as in claim 19, further comprising: 

2 means for displaying a filtering expression in a graphical user interface; 

3 means for selecting, from said graphical user interface, records from network infor- 

4 mation files to display said characteristics of said traffic. 

1 29. (ORIGINAL) The apparatus as in claim 28, further comprising: 

2 means for calculating parameters that are associated with the records selected from 

3 network files and storing the parameters in a local file. 

l 30. (CANCELLED) 

1 31. (ORIGINAL) The apparatus as in claim 19, further comprising: 

2 means for using a filtering program to select records in network information files that 

3 meet selected filtering criteria. 

l 32. (PREVIOUSLY PRESENTED) The apparatus as in claim 3 1 , further comprising: 
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2 means for compiling the selected records from network information files during the 

3 selected time intervals, each compiled record meeting at least one selected filtering criterion. 

1 33. (ORIGINAL) The apparatus as in claim 32, further comprising: 

2 means for calculating data that represent the compiled records, and storing the data in 

3 a file. 

1 34. (PREVIOUSLY PRESENTED) The apparatus as in claim 19, further comprising: 

2 means for displaying a map of the network topology and overlaying the map with said 

3 succession of graphical images. 

1 35. (PREVIOUSLY PRESENTED) The apparatus as in claim 32, further comprising: 

2 means for including a time interval criterion which indicates how often to compile 

3 and package information from the network information files. 

1 36. (PREVIOUSLY PRESENTED) The apparatus as in claim 19, further comprising: 

2 means for defining the larger time interval with a starting time and an ending time 

3 specified within a filtering criteria. 

1 37. (CURRENTLY AMENDED) A data visualization apparatus for graphically presenting 

2 characteristics of data traffic on a distributed computer network, comprising: 

3 a computer to monitor traffic on said network; 

4 a graphical user interface to select a characteristic of said traffic for display; 
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a reporting system executing on said computer to obtain a plurality of values of said 
characteristic for selected time intervals within a larger time interval; and 

a visualization system executing on said computer to present said characteristic by 
playing a rapid succession of graphical images, each graphical image representing said net- 
work as nodes connected by lines, said nodes each representing components in said network, 
said lines representing traffic flow between^edes said components , each graphical image 
graphically representing the value of said characteristic at a particular selected time interval 
within the larger time interval with a property of at least one line of said lines, said property 
indicating a value of said characteristics. 



1 38-39. (CANCELLED) 



1 40. (ORIGINAL) The apparatus as in claim 37, further comprising: 

2 instructions to execute in said computer to use a width of said at least one line as said 

3 property. 



1 41. (ORIGINAL) The apparatus as in claim 37, further comprising: 

2 instructions to execute in said computer to use a color of said at least one line as said 

3 property. 



1 42. (ORIGINAL) The apparatus as in claim 37, further comprising: 

2 instructions to execute in said computer to use an arrow drawn on said at least one 

3 line as said property. 



43. (ORIGINAL) The apparatus as in claim 37, further comprising: 
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2 instructions to execute in said computer to use a length of said at least one line as said 

3 property. 

1 44. (ORIGINAL) The apparatus as in claim 37, further comprising: 

2 instructions to execute in said computer to use a density of said at least one line as 

3 said property. 

1 45. (ORIGINAL) The apparatus as in claim 37, further comprising: 

2 instructions to execute in said computer to use a visual characteristic of said at least 

3 one line as said property. 

1 46. (ORIGINAL) The apparatus as in claim 37, further comprising: 

2 instructions to execute in said computer to display a filtering expression in a graphical 

3 user interface; 

4 instructions to execute in said computer to select, from said graphical user interface, 

5 records from network information files to display said characteristic of said traffic. 

1 47. (ORIGINAL) The apparatus as in claim 46, further comprising: 

2 instructions to execute in said computer to calculate parameters that are associated 

3 with the records selected from network files and storing the parameters in a local file. 

l 48. (CANCELLED) 

l 49. (ORIGINAL) The apparatus as in claim 37, further comprising: 
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instructions to execute in said computer to use a filtering program to select records in 
network information files that meet selected filtering criteria. 

50. (PREVIOUSLY PRESENTED) The apparatus as in claim 49, further comprising: 

instructions to execute in said computer to compile the selected records from network 
information files during the selected time intervals, each compiled record meeting at least 
one selected filtering criterion. 

51. (ORIGINAL) The apparatus as in claim 50, further comprising: 

instructions to execute in said computer to calculate data that represent the compiled 
records, and storing the data in a file. 

52. (PREVIOUSLY PRESENTED) The apparatus as in claim 37, further comprising: 

instructions to execute in said computer to display a map of the network topology and 
overlaying the map with said succession of graphical images. 

53. (PREVIOUSLY PRESENTED) The apparatus as in claim 50, further comprising: 

instructions to execute in said computer to include a time interval criterion which in- 
dicates how often to compile and package information from the network information files. 

54. (PREVIOUSLY PRESENTED) The apparatus as in claim 37, further comprising: 

instructions to execute in said computer to define the larger time interval with a start- 
ing time and an ending time specified within a filtering criteria. 

55-56 (CANCELLED) 
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